Marek Miklewicz
93 lines
4.2 KiB
PHP
93 lines
4.2 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
require_once PLUGIN_ROOT . '/exec/lib/Settings.php';
|
|
require_once PLUGIN_ROOT . '/exec/lib/RemoteLoginUrlClient.php';
|
|
|
|
test('remote login url client builds direct ssh command by default', function (): void {
|
|
$settings = Settings::fromArray([
|
|
'MAIL_LOGIN_TARGET_BASE_URL' => 'https://mx1.domena.pl:2222',
|
|
'MAIL_LOGIN_SSH_HOST' => 'mx1.domena.pl',
|
|
'MAIL_LOGIN_SSH_PORT' => '222',
|
|
'MAIL_LOGIN_SSH_USER' => 'root',
|
|
'MAIL_LOGIN_SSH_IDENTITY' => '/secure/key',
|
|
'MAIL_LOGIN_SSH_KNOWN_HOSTS' => '/secure/known_hosts',
|
|
'LOGIN_KEY_TTL' => '30',
|
|
'USER_IP_BOUND' => '1',
|
|
]);
|
|
$request = new LoginUrlRequest('mxtest', 'h4.domena.pl', 'h4', 30, true, '198.51.100.10', '/', 1782810000);
|
|
$command = RemoteLoginUrlClient::buildCommand($settings, $request);
|
|
|
|
assert_same('ssh', $command[0]);
|
|
assert_contains('UserKnownHostsFile=/secure/known_hosts', implode(' ', $command));
|
|
assert_contains('root@mx1.domena.pl', implode(' ', $command));
|
|
assert_not_contains('mail-login-create-url', implode(' ', $command));
|
|
assert_not_contains('MX_LOGIN_MODE', implode(' ', $command));
|
|
assert_contains('/usr/bin/da login-url', implode(' ', $command));
|
|
assert_contains('--user=mxtest', implode(' ', $command));
|
|
assert_contains('--expiry=30s', implode(' ', $command));
|
|
assert_contains('--ip=198.51.100.10', implode(' ', $command));
|
|
});
|
|
|
|
test('remote login url client omits expiry when ttl is zero', function (): void {
|
|
$settings = Settings::fromArray([
|
|
'MAIL_LOGIN_TARGET_BASE_URL' => 'https://mx1.domena.pl:2222',
|
|
'MAIL_LOGIN_SSH_HOST' => 'mx1.domena.pl',
|
|
'MAIL_LOGIN_SSH_IDENTITY' => '/secure/key',
|
|
'MAIL_LOGIN_SSH_KNOWN_HOSTS' => '/secure/known_hosts',
|
|
'LOGIN_KEY_TTL' => '0',
|
|
]);
|
|
$request = new LoginUrlRequest('mxtest', 'h4.domena.pl', 'h4', 0, true, '198.51.100.10', '/', 1782810000);
|
|
$command = RemoteLoginUrlClient::buildCommand($settings, $request);
|
|
|
|
assert_not_contains('--expiry=', implode(' ', $command));
|
|
});
|
|
|
|
test('remote login url client validates direct ssh output before returning it', function (): void {
|
|
$settings = Settings::fromArray(['MAIL_LOGIN_TARGET_BASE_URL' => 'https://mx1.domena.pl:2222']);
|
|
$request = new LoginUrlRequest('mxtest', 'h4.domena.pl', 'h4', 30, true, '198.51.100.10', '/', 1782810000);
|
|
|
|
$client = new RemoteLoginUrlClient(function (array $command, int $timeout): ProcessResult {
|
|
return new ProcessResult(0, "URL: https://mx1.domena.pl:2222/api/login/url?key=SECRET\n", '');
|
|
});
|
|
|
|
assert_same('https://mx1.domena.pl:2222/api/login/url?key=SECRET', $client->create($settings, $request));
|
|
|
|
$badClient = new RemoteLoginUrlClient(function (array $command, int $timeout): ProcessResult {
|
|
return new ProcessResult(0, "https://evil.example/api/login/url?key=SECRET\n", '');
|
|
});
|
|
|
|
try {
|
|
$badClient->create($settings, $request);
|
|
throw new RuntimeException('Expected invalid direct SSH URL to fail');
|
|
} catch (RuntimeException $e) {
|
|
assert_contains('login url', strtolower($e->getMessage()));
|
|
}
|
|
});
|
|
|
|
test('remote login url client reports direct ssh failure diagnostics', function (): void {
|
|
$settings = Settings::fromArray([
|
|
'MAIL_LOGIN_TARGET_BASE_URL' => 'https://mx1.domena.pl:2222',
|
|
]);
|
|
$request = new LoginUrlRequest('mxtest', 'h4.domena.pl', 'h4', 30, true, '198.51.100.10', '/', 1782810000);
|
|
$client = new RemoteLoginUrlClient(function (array $command, int $timeout): ProcessResult {
|
|
return new ProcessResult(255, '', "Host key verification failed.\n");
|
|
});
|
|
|
|
try {
|
|
$client->create($settings, $request);
|
|
throw new RuntimeException('Expected direct ssh failure to fail');
|
|
} catch (RuntimeException $e) {
|
|
assert_contains('MX direct SSH command failed', $e->getMessage());
|
|
assert_contains('exit 255', $e->getMessage());
|
|
assert_contains('Host key verification failed.', $e->getMessage());
|
|
}
|
|
});
|
|
|
|
test('process runner returns stdout and exit code from real command', function (): void {
|
|
$result = RemoteLoginUrlClient::runProcess(['php', '-r', 'echo "ok\n";'], 5);
|
|
|
|
assert_same(0, $result->exitCode);
|
|
assert_same("ok\n", $result->stdout);
|
|
});
|